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IN THE CLAIMS 

Please amend the claims as follows: 

1 . (Currently Amended) A data storage device performing input/output of classified data 
in accordance with predetermined input/output procedures for protection of said classified data, 
and storing said classified data, comprising: 

an interface portion externally exchanging data; 

a first storage portion storing said classified data; and 

a second storage portion storing log information related to the input/output of said 
classified data according to said predetermined input/output procedures and an address 
representing a storage position of said classified data to be input/output in said first storage 
portion ., wherein 

said log information includes: 

an identification code identifying said classified data to be input/output, and 
a first status information representing a state of storage of said classified data to be 
input/output in said first storage portion . 

2. (Currently Amended) The data storage device according to claim 1, further 
comprising: 

a control portion controlling the input/output of said classified data, wherein 
said log information includes: 

an identification code identifying said classifi e d data to be input/output, and 
a first status information representing a state of storag e of said classified data to be 
input/output in said first storage portion; and 
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said control portion operates in accordance with said predetermined input/output 
procedures to receive said identification code and said address of said classified data to be 
input/output via said interface portion, and to store said identification code and said address in 
said second storage portion, and operates in response to a request externally applied via said 
interface portion to determine the state of storage of said classified data in said first storage 
portion based on said identification code and said address stored in said second storage portion, 
and to renew said first status information based on said state of storage. 

3. (Previously Presented) The data storage device according to claim 2, wherein 
said log information further includes a second status information recording a status of 

progression of said predetermined input/output procedures relating to the input/output of said 
classified data to be input/output, and 

said control portion renews said second status information in accordance with the 
progression of said predetermined input/output procedures. 

4. (Previously Presented) The data storage device according to claim 2, wherein 
said log information further includes procedure specifying information specifying said 

predetermined input/output procedures, and 

said control portion renews said procedure specifying information in response to every 
new obtaining of said procedure specifying information. 

5. (Previously Presented) The data storage device according to claim 4, further 
comprising: 
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a cipher communication portion operating in accordance with said predetermined 
input/output procedures to establish a cipher communication path to a supplier or a receiver of 
said classified data via said interface portion, and to receive or transmit said classified data via 
said established cipher communication path, wherein 

in an input procedure included in said predetermined input/output procedures for 
receiving and storing said classified data, 

said cipher communication portion receives said classified data in accordance with said 
input procedure, and 

said control portion receives said address via said interface portion, stores said received 
address in said second storage portion, and stores said classified data received by said cipher 
communication portion in a storage position on said first storage portion specified by said 
received address. 

6. (Previously Presented) The data storage device according to claim 5, wherein 
in said input procedure, 

said cipher communication portion produces a first session key, and 

said control portion renews said procedure specifying information with said first session 

key in response to every production of said first session key by said cypher cipher 

communication portion. 

7. (Previously Presented) The data storage device according to claim 5, further 
comprising: 

a signing portion producing a signed log information prepared by affixing an electronic 



WDC99 1527249-1.070456.0056 



4 



Application No.: 10/506,505 

signature to said log information or a part of said log information, wherein 

in a re-input procedure included in said predetermined input/output procedures for 
resuming said input procedure when said input procedure is interrupted, 

said control portion renews said first status information included in said log information 
stored in said second storage portion, obtains said log information from said second storage 
portion and applies said log information to said signing portion, 

said signing portion receives said log information including said renewed first status 
information to produce said signed log information, and 

said cipher communication portion transmits said signed log information produced by 
said signing portion via said established cipher communication path in accordance with said re- 
input procedure. 

8. (Previously Presented) The data storage device according to claim 5, wherein 
in an output procedure included in said predetermined input/output procedures for 

externally outputting said classified data stored in said first storage portion, 

said control portion receives said address via said interface portion, stores said received 

address in said second storage portion, obtains said classified data from the storage position on 

said first storage portion specified by said received address, and applies said classified data to 

said cipher communication portion, and 

said cipher communication portion transmits said classified data received from said 

control portion in accordance with said output procedure. 

9. (Previously Presented) The data storage device according to claim 8, wherein 
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in said output procedure, 

said cipher communication portion receives an externally produced second session key, 

and 

said control portion renews said procedure specifying information with said received 
second session key in response to every reception of said second session key by said cipher 
communication portion. 

10. (Previously Presented) The data storage device according to claim 8, further 
comprising: 

a log certifying portion verifying and certifying externally applied signed log 
information, wherein 

in a re-output procedure included in said predetermined input/output procedures for 
resuming said output procedure when said output procedure is interrupted, 

said cipher communication portion receives and applies said signed log information to 
said log certifying portion in accordance with said re-output procedure, 

said log certifying portion verifies said signed log information received from said cipher 
communication portion, and 

said control portion determines whether said output procedure is interrupted or not, based 
on said log information stored in said second storage portion and said received signed log 
information when said received signed log information is certified; determines whether the 
storage position on said first storage portion specified by said address stored in said second 
storage portion can be restored to the storage state before interruption of said output procedure or 
not, when it is determined that said output procedure is interrupted; restores said storage position 
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to the storage state attained before interruption of said output procedure, and resumes said 
interrupted output procedure, when it is determined that the restoring is possible. 

1 1 . (Previously Presented) The data storage device according to claim 2, wherein 
said classified data includes said identification code peculiar to said classified data, and 
said control portion determines the storage state of said classified data in said first storage 

portion by specifying said classified data in accordance with said identification code included in 
said classified data stored in the storage position on said first storage portion specified by said 
address. 

12. (Previously Presented) The data storage device according to claim 11, wherein 
in an input procedure included in said predetermined input/output procedures for 

receiving said classified data via said interface portion and storing said classified data in said 
first storage portion, 

said control portion interrupts said input procedure without storing said classified data in 
said first storage portion when mismatch occurs between the identification code included in said 
received classified data and the identification code included in said log information. 

13. (Previously Presented) The data storage device according to claim 11, wherein 
in an output procedure included in said predetermined input/output procedures for 

outputting said classified data stored in said first storage portion via said interface portion, 

said control portion interrupts said output procedure without outputting said classified 
data when the identification code included in said classified data stored in the storage position on 
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said first storage portion specified by said address does not match with the identification code 
included in said log information. 

14. (Previously Presented) The data storage device according to claim 2, further 
comprising: 

a signing portion producing signed data for said log information, and producing signed 
log information by affixing said produced signed data to said log information, wherein 

in a re-input procedure performed for resuming an input procedure for receiving said 
classified data via said interface portion and storing said classified data in said first storage 
portion, when said input procedure is interrupted, 

said control portion outputs said signed log information produced by said signing portion 
via said interface portion. 

15. (Previously Presented) The data storage device according to claim 14, further 
comprising: 

a log certifying portion verifying and certifying an additional signed log information 
prepared by affixing a signed data for an additional log information of said receiver to said 
additional log information, and received from said receiver of said classified data via said 
interface portion, wherein 

in a re-output procedure performed for resuming an output procedure for outputting said 
classified data stored in said first storage portion via said interface portion, when said output 
procedure is interrupted, 

said log certifying portion verifies correctness of said additional signed log information 
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received from the receiver of said classified data in said interrupted output procedure, and 

said control portion interrupts said re-output procedure, when said additional signed log 
information is not certified, or when said additional signed log information is certified and it is 
determined based on said additional signed log information and said log information stored in 
said second storage portion that said output procedure is not interrupted. 

16. (Previously Presented) The data storage device according to claim 1, wherein 
said classified data is a decryption key for decrypting and using encrypted content data, 

and 

said data storage device further comprises a third storage portion storing said encrypted 
content data. 
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